11818 matches found
CVE-2023-48887
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request...
CVE-2023-48886
A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request...
CVE-2023-48886
A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request...
CVE-2023-45168
Summary of CVE-2023-45168 (IBM AIX invscout): Affects IBM AIX versions 7.2 and 7.3 and VIOS 3.1. A local, non-privileged user can exploit a vulnerability in the invscout command to execute arbitrary commands. The vulnerability stems from the invscout component and has a high impact on confidentia...
CVE-2023-48887
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request...
CVE-2023-48886
Summary: CVE-2023-48886 targets NettyRpc v1.2 with a deserialization vulnerability that enables remote arbitrary command execution via a crafted RPC request. The CVSS v3.1 base score reported is 9.8 (CRITICAL), with network access required and no user interaction. Several connected sources corrob...
NettyRpc Security Vulnerability
NettyRpc is a lightweight distributed RPC framework. A security vulnerability exists in NettyRpc v1.2, which stems from the presence of a deserialization vulnerability that allows an attacker to execute arbitrary commands by sending a crafted RPC request...
CVE-2023-48887
CVE-2023-48887 applies to Jupiter v1.3.1 and describes a deserialization vulnerability that allows an attacker to execute arbitrary commands by sending a crafted RPC request. The issue is categorized as a high/critical remote code execution risk (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Mu...
CVE-2023-48886: Deserialization of Untrusted Data
A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request...
CVE-2023-48886
A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request...
PT-2023-30998 · Nettyrpc · Nettyrpc
Name of the Vulnerable Software and Affected Versions: NettyRpc version 1.2 Description: A deserialization vulnerability allows attackers to execute arbitrary commands via sending a crafted RPC request. Recommendations: For NettyRpc version 1.2, at the moment, there is no information about a newe...
CVE-2023-48886
A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request...
CVE-2023-48887: Deserialization of Untrusted Data
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request...
Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout (CVE-2023-45168)
Summary A vulnerability in the AIX invscout command could allow a non-privileged local user to execute arbitrary commands CVE-2023-45168. Vulnerability Details CVEID:CVE-2023-45168 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the invscout command to...
AIX is vulnerable to arbitrary command execution due to invscout
IBM SECURITY ADVISORY First Issued: Thu Nov 30 10:49:53 CST 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/invscoutadvisory5.asc Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout CVE-2023-45168...
PT-2023-7631 · Totolink · Totolink X6000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version V9.4.0cu.852 B20230719 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands. The sub 4119...
TOTOLINK X6000R security vulnerabilities
TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK X6000R version V9.4.0cu.852B20230719, which stems from the failure of the formEnable parameter of the sub4119A0 function to correctly filter the construct command...
CVE-2023-3741: Improper Neutralization of Special Elements used in an OS Command
An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...
Quantum HD Unity Arbitrary Command Execution
The vulnerability of Microprogrammed Software for Quantum HD Unity Compressor, Quantum HD Unity AcuAir, Quantum HD Unity, Quantum HD Unity Engine Room, and Quantum HD Unity Interface exists due to the improper activation of debugging modes for certain services. Exploiting this vulnerability allow...